Information Security Engineer

Opensity Solutions; Manila; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Opensity Solutions is seeking an experienced Information Security Engineer to design, implement, and manage technical security controls across endpoints, networks, identity, cloud, and infrastructure. You will work with IT, security, and cloud teams to strengthen enterprise security and respond to incidents.

The ideal candidate has hands-on security technology experience, vulnerability management, SIEM capabilities, and a strong focus on least privilege and defense in depth.

Qualifications

• Requires 5+ years in information security or related field.
• Hands-on experience with enterprise security technologies and controls.
• Experience with monitoring, vulnerability management, and incident response.
• Strong knowledge of least privilege and defense in depth principles.

Responsibilities

• Design, implement, administer, and maintain security controls across endpoints, networks, identities, cloud and infrastructure.
• Configure and optimize security technologies including EDR, firewalls, VPNs, logging, and vulnerability mgmt.
• Monitor security events and logs to identify threats and support investigations and containment.
• Collaborate with IT and infra teams to implement secure configurations and system hardening.
• Conduct security assessments and vulnerability analysis to identify gaps and improvements.
• Support remediation by prioritizing risks and coordinating with system owners.
• Assist in remediation planning after penetration tests and security assessments.
• Participate in security incident response activities including investigation and documentation.

Skills

Security controls

Incident response

Vulnerability management

Threat monitoring

IAM

PAM

Encryption

SIEM

Security hardening

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security

Security+ certification

SSCP

GIAC

Microsoft Security certifications

Azure Security certifications

Job description

We are seeking an experienced Information Security Engineer to design, implement, administer, and continuously improve technical security controls across our enterprise environment.

This role will work closely with Information Security, IT, infrastructure, cloud, workplace, and application teams to strengthen security across endpoints, networks, identity, cloud, and infrastructure. The ideal candidate brings strong hands-on experience with enterprise security technologies, vulnerability management, security monitoring, secure configuration, and incident response support.

Title

Information Security Engineer

Location

Manila, PH

Job Type

Full-time

Key Responsibilities

• Design, implement, administer, and maintain technical security controls across endpoint, network, identity, cloud, and infrastructure environments.
• Configure, administer, and optimize security technologies including endpoint protection, email security, firewalls, VPN, logging and monitoring, vulnerability management, and related platforms.
• Monitor security events, alerts, logs, and control health to identify potential threats and support investigation, response, and containment activities.
• Partner with IT and infrastructure teams to implement secure configurations, system hardening, and technical safeguards aligned with security standards.
• Conduct technical security assessments, configuration reviews, and vulnerability analysis to identify security gaps and improvement opportunities.
• Support vulnerability remediation by validating findings, prioritizing risks, and coordinating corrective actions with system owners.
• Review penetration testing and security assessment findings and support remediation planning and closure.
• Participate in security incident response activities, including investigation, containment, documentation, and follow-up.
• Support identity and access security initiatives, including authentication controls, privileged access management, and least-privilege principles.
• Collaborate with cloud, infrastructure, workplace, and application teams to embed security requirements into technical and operational processes.
• Support audits and compliance activities by providing technical evidence, validating controls, and addressing identified gaps.
• Work with security vendors and external partners to support the secure implementation and operation of security technologies.
• Develop and maintain security standards, technical baselines, procedures, runbooks, and engineering documentation.
• Stay current with emerging threats, attack techniques, vulnerabilities, and security technologies, and recommend appropriate improvements.
• Perform other duties and security-related activities as assigned.

What We're Looking For

• 5+ years of experience in information security, cybersecurity, infrastructure security, or a related technical field.
• Hands-on experience implementing, administering, or supporting enterprise security technologies and controls.
• Strong working knowledge of technologies such as:
• Firewalls and VPN
• Endpoint security / EDR
• Vulnerability management
• SIEM and security monitoring
• Identity and Access Management (IAM)
• Privileged Access Management (PAM)
• Encryption and security controls
• Experience with security monitoring, vulnerability management, secure configuration, system hardening, or incident response.
• Strong understanding of least privilege, defense in depth, risk reduction, and secure configuration principles.
• Ability to analyze security alerts, logs, events, vulnerabilities, and technical findings.Experience partnering with IT, infrastructure, cloud, or platform teams to implement security controls in production environments.
• Experience supporting security assessments, audits, control validation, and remediation activities.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities and work effectively in a fast-paced environment.
• Strong collaboration skills when working with internal teams, vendors, auditors, and external partners.

Education & Certifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related field is preferred.
• Relevant certifications such as CompTIA Security+, SSCP, GIAC, Microsoft Security certifications, Azure Security certifications, or equivalent are beneficial.

What You'll Bring

• Strong ownership and accountability when handling security matters.
• Professionalism, integrity, and discretion when working with sensitive systems, information, and security incidents.
• A proactive approach to identifying and addressing security risks.
• Strong technical curiosity and commitment to continuous learning.
• Ability to work independently while contributing effectively within a collaborative security team.
• A continuous-improvement mindset focused on strengthening security controls and reducing organizational risk.